Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: HVx18CpDr7+xMJimgSZ/HYFY2kRMUrnEpiROxa59PTM=
Subject key identifier: 80:EF:98:0B:DB:20:16:15:F7:F7:0A:3E:86:36:1F:AF:6D:94:EB:F7
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 019853E975668D8179B0F079A8E9D731530F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 02:01:05 +0000
Manifest this update: Tue 29 Jul 2025 02:01:05 +0000
Manifest next update: Wed 30 Jul 2025 02:01:05 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: my9I3nCVXaV1JEROxgmOXTNwh7O+Q/cq+LLexp/9vaM=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:75:66:8d:81:79:b0:f0:79:a8:e9:d7:31:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jul 29 02:01:05 2025 GMT
Not After : Jul 30 02:01:05 2025 GMT
Subject: CN=80ef980bdb201615f7f70a3e86361faf6d94ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:c5:7c:16:32:ee:ee:2a:4a:a0:df:cf:53:
9c:7b:32:6f:a1:4c:a4:86:28:14:41:5c:30:97:dc:
8d:a5:70:63:88:b5:d5:c8:b6:6b:ea:6f:73:7d:ef:
46:c6:57:84:e8:e4:df:d2:83:9e:29:10:26:65:fd:
e9:0c:d5:aa:8d:a0:70:7d:df:59:e5:e7:f9:02:7e:
bc:33:e6:ce:14:42:50:41:bf:30:07:af:90:33:4d:
38:6d:14:8b:41:7c:a7:28:e0:35:f7:6d:fc:57:77:
26:f5:eb:3b:4d:b1:84:19:82:af:d7:c0:5a:e8:e7:
7c:6f:99:74:2a:50:42:f7:8c:ac:14:84:43:30:b7:
67:fa:1f:71:65:ab:93:27:be:05:f8:fe:d7:50:e3:
1b:b6:d4:92:e8:c3:fc:dc:1b:23:bd:f1:df:3d:15:
2c:d0:06:98:c5:c5:e1:95:eb:e9:6d:e6:8c:7e:35:
dc:ee:e3:43:3d:b6:72:89:b7:97:97:25:1e:21:38:
2a:17:8d:79:e3:e0:dd:13:31:a4:6a:8f:55:41:60:
be:cb:a8:d4:93:2c:2b:bd:dc:e6:a5:c7:b2:52:8e:
ac:25:37:e0:48:5e:be:14:0c:16:4e:e1:39:33:83:
cc:4a:2e:89:3a:d4:05:d8:54:f1:17:f8:ac:05:f3:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:98:0B:DB:20:16:15:F7:F7:0A:3E:86:36:1F:AF:6D:94:EB:F7
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b9:3e:97:97:b5:df:ea:61:c3:44:43:6f:43:4f:4c:8d:e6:
a7:b3:38:06:9a:95:23:f4:7a:24:4e:11:4c:0d:2f:9f:03:20:
07:a0:6f:b5:a8:00:f3:0a:cd:17:5f:fc:a5:39:6a:ef:74:da:
e6:eb:d5:5b:b0:f7:21:b9:70:b0:96:c8:a3:8b:b8:43:3d:f1:
74:83:b8:c8:a9:74:06:51:05:81:60:40:bb:bc:37:eb:3f:c5:
fc:61:49:84:82:cb:7c:6d:fc:ef:9b:25:8e:f2:fa:a2:63:5b:
9a:8b:86:1c:71:44:8e:91:f2:bd:a4:fd:de:09:d4:4a:04:4c:
b9:45:49:d7:1a:c9:2c:bd:7a:66:8b:f8:dd:1c:9c:a4:be:53:
de:6f:24:20:4e:d8:71:e0:b8:22:a7:2d:c9:e3:11:ce:92:aa:
1c:a8:74:a9:ad:74:87:94:80:70:56:a5:4e:fd:cc:3f:7e:41:
d7:69:b9:aa:4b:4a:a0:63:e0:ae:ce:af:38:70:05:7a:ca:82:
ea:1a:ab:01:92:a8:35:ec:84:50:de:9b:31:79:e0:c7:39:94:
05:45:ea:62:37:ff:93:4a:7c:1e:fe:7e:16:0e:cb:2f:04:ec:
1b:87:5c:9e:10:94:3b:ff:42:c6:3c:0f:f3:b7:e0:c2:a2:7c:
0e:ce:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:57 2025 by rpki-client